Researchers at Dutch security company Fox-IT recently took apart an average botnet running amok in the Netherlands called Pobelka. The analysis paints a picture of the simplicity with which even a small criminal organization can spread malware for profit, virtually unscathed. The botnet was outed in late December and discovered to be spreading the Citadel Trojan to harvest credentials, largely from online banking customers in Germany and Holland. The attackers also used some of the stolen credentials to hijack websites to host either exploit kits or phishing sites.
Source: https://threatpost.com/researchers-deconstruct-pobelka-botnet-011813/77427/